Hi, I have a Razer Blade 15 Base (Early 2020), model RZ09-0328 / product RZ09-03287G22.
My current BIOS version is 1.02.
When Secure Boot is enabled, the laptop fails to boot and shows:
“Secure Boot Violation – Invalid signature detected. Check Secure Boot Policy in Setup.”
If I disable Secure Boot, Windows 11 boots normally.
I downloaded the official BIOS 1.06 updater from Razer. The updater appears to complete and restarts the laptop, but there is no actual firmware flashing stage and after reboot the BIOS is still 1.02.
I checked Windows Code Integrity logs and found the actual reason the BIOS updater is failing:
Event ID 3023:The driver ...\Razer\Update Tool\amifldrv64.sys is blocked from loading as the driver has been revoked by Microsoft.
Event ID 3077:amifldrv64.sys did not meet the Authenticode signing level requirements or violated code integrity policy.
The driver itself has a valid American Megatrends signature, but Windows is explicitly blocking/revoking it.
I also verified:
- Windows is installed in UEFI mode
- Windows Boot Manager is present and correct
bootmgfw.efihas a valid Microsoft signature- The firmware DB contains both Microsoft Windows Production PCA 2011 and Microsoft Corporation UEFI CA 2011
- The 2011 PCA is not present in DBX
- TPM 2.0 is enabled and working
- Secure Boot only fails when enabled
I do not want to force-flash the BIOS with AFU tools or bypass Microsoft’s revoked-driver protection because of the risk of bricking the laptop.
Can Razer please provide one of the following:
- A Windows 11-compatible BIOS 1.06 updater using a non-revoked flashing driver,
- An official EFI/USB BIOS flashing method, or
- Another supported way to update the firmware and permanently fix the Secure Boot violation?
This appears to match other RZ09-0328 Secure Boot / BIOS updater reports posted here.
Thanks.
